How automatic SSL works
Enhance can issue and renew Let's Encrypt certificates for domains attached to a website. The certificate authority must be able to resolve the domain and reach the website before validation can complete.
Adding a domain to the panel does not change public DNS. Both steps are required.
Check a certificate that is pending or failed
- Confirm the domain and www alias are attached to the correct website.
- Confirm every A and AAAA record resolves to an address assigned to the service.
- Remove conflicting records and make sure the domain is reachable over port 80.
- Temporarily disable a CDN proxy or strict redirect rule if it blocks certificate validation.
- Wait for DNS changes to propagate, then retry the certificate action from the website's Domains or Security area.
If the browser still shows a warning
- Name mismatch means the certificate does not include the exact hostname being opened.
- Expired certificate can indicate renewal failed because the domain no longer resolves to the service.
- Mixed content means the page loads some images, scripts or styles over http:// even though the certificate is valid.
- A redirect loop is normally an application or CDN HTTPS-setting conflict, not a missing certificate.
Important
Do not bypass a certificate warning on an account or payment page. Contact support if the hostname and DNS are correct but the warning remains.
Official references
Platforms and tools change over time. Use these official references for the current product documentation.